General
- Target 037956df5ca6a3d3e22ba3647f7f72952fa4dd0f8858d9f39f28d0a7274657bb
- Size 129KB
- Sample260907-w9tzmatarh
- SHA256 037956df5ca6a3d3e22ba3647f7f72952fa4dd0f8858d9f39f28d0a7274657bb
- MD5 444a49f9f72e4f8c83950b22718b8328
- SHA1 6bb621887cd7adf489e5effaff71112d2a6dc930
- SHA512 6570e48675997a0e219f3b1357200c85785a3e3335399279bf7def39ee3639163cb2400953849af57cbafa59c073ea4220da19a87158c14bf5eab687cf36f4bc
- SSDEEP 384:IbXGUH57yQqZLR/P/e+fqnFYVA0kclVQC71nVctV4hlrs:IjGUH573qHBfqnFYHzlVQCJnytIt
- TLSH T1CED3C86AEE73FA44C74B243D24889D6FC5A72E185CE1473DC360CB294A4AFC0575E1AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
037956df5ca6a3d3e22ba3647f7f72952fa4dd0f8858d9f39f28d0a7274657bb.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
037956df5ca6a3d3e22ba3647f7f72952fa4dd0f8858d9f39f28d0a7274657bb.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
cobaltstrike
C2
-
http://8.134.12.90:7778/3Btt
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06)
Targets
-
- Target 037956df5ca6a3d3e22ba3647f7f72952fa4dd0f8858d9f39f28d0a7274657bb
- Size 129KB
- SHA256 037956df5ca6a3d3e22ba3647f7f72952fa4dd0f8858d9f39f28d0a7274657bb
- MD5 444a49f9f72e4f8c83950b22718b8328
- SHA1 6bb621887cd7adf489e5effaff71112d2a6dc930
- SHA512 6570e48675997a0e219f3b1357200c85785a3e3335399279bf7def39ee3639163cb2400953849af57cbafa59c073ea4220da19a87158c14bf5eab687cf36f4bc
- SSDEEP 384:IbXGUH57yQqZLR/P/e+fqnFYVA0kclVQC71nVctV4hlrs:IjGUH573qHBfqnFYHzlVQCJnytIt
- TLSH T1CED3C86AEE73FA44C74B243D24889D6FC5A72E185CE1473DC360CB294A4AFC0575E1AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.